Description

In Grafana 2.x through 6.x before 6.3.4, parts of the HTTP API allow unauthenticated use. This makes it possible to run a denial of service attack against the server running Grafana.

Remediation

References

CVE-2019-15043

Related Vulnerabilities

Lighttpd Other Vulnerability (CVE-2007-3949)

WordPress Plugin FunCaptcha-Anti-Spam CAPTCHA Cross-Site Request Forgery (0.3.2)

Jboss EAP CVE-2023-3223 Vulnerability (CVE-2023-3223)

WordPress Plugin Complete Gallery Manager for WordPress Arbitrary File Upload (3.3.3)

MySQL CVE-2012-0490 Vulnerability (CVE-2012-0490)

Severity

High

Classification

CVE-2019-15043 CWE-306 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Tags

Missing Update Known Vulnerabilities